Mirror/nix-git
Mirror/nix-git
1
0
Fork 0
mirror of https://codeberg.org/privacy1st/nix-git synced 2024-11-21 22:03:19 +01:00
Code Issues Packages Projects Releases Wiki Activity

NixOS 24.05: umask boot partition

Browse Source
This commit is contained in:
Daniel Langbein 2024-07-12 22:57:37 +02:00
parent 849985d849
commit 65a0f7bf2f
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/yodaHedgehog/hardware-configuration.nix
View File

@ -30,6 +30,7 @@
fileSystems."/boot" = fileSystems."/boot" =
{ device = "/dev/disk/by-uuid/81A5-B98A"; { device = "/dev/disk/by-uuid/81A5-B98A";
fsType = "vfat"; fsType = "vfat";
options = [ "umask=0077" ];
}; };
fileSystems."/mnt/backup" = fileSystems."/mnt/backup" =

5
hosts/yodaNas/hardware-configuration.nix
View File

@ -30,6 +30,11 @@
fileSystems."/boot" = fileSystems."/boot" =
{ device = "/dev/disk/by-uuid/072E-897D"; { device = "/dev/disk/by-uuid/072E-897D";
fsType = "vfat"; fsType = "vfat";
# Fixes the error
# systemd-boot-random-seed.service: Mount point '/boot' which backs the random seed file is world accessible, which is a security hole!
# TODO: Do this with disko. Example: https://github.com/wimpysworld/nix-config/blob/0cc52f746d5c5fec9d8edea5391661da811eb08f/nixos/tanis/disks.nix#L17
# TODO: Add this to other NixOS hosts.
options = [ "umask=0077" ];
}; };
fileSystems."/mnt/data" = fileSystems."/mnt/data" =